Privacy Policy

1. Introduction

IWORDS Global Ltd (“IWORDS”, “we”, “our”) takes the protection of your personal data seriously. This Privacy Policy explains what data we collect when you useiwordscommunications.com, why we collect it, and what your rights are under the EU General Data Protection Regulation (GDPR / DSGVO).

2. Data controller

The controller responsible for the processing of your personal data is:

Full registered address and tax details are listed on the imprint page.

3. Personal data we collect

We collect personal data in the following situations:

• Contact form: name, email address, organization (optional), subject (optional), and the message you send us.
• Quote form: the above plus your role, the services you're interested in, source/target languages, project volume, timeline, budget range, and any project details you provide.
• Newsletter: only your email address.
• Cookies and analytics: see Section 7 below. We do not use any tracking cookies without your explicit consent.

4. Purposes of processing

We process your data to:

• respond to your enquiries and prepare quotes;
• deliver the newsletter you subscribed to;
• operate, maintain, and improve our website;
• comply with our legal obligations.

5. Legal basis (Article 6 GDPR)

• Art. 6(1)(a) — consent: for newsletter subscriptions and non-essential cookies.
• Art. 6(1)(b) — pre-contract / contract: for processing contact and quote form submissions.
• Art. 6(1)(f) — legitimate interests: for basic site analytics, fraud prevention, and security logging.
• Art. 6(1)(c) — legal obligation: where retention or disclosure is required by law.

6. Third-party services

We use the following processors. Each acts under a Data Processing Agreement with us.

• Supabase Inc. (database and backend infrastructure): stores published website content, form submissions, and translation drafts. Privacy policy.
• Vercel (hosting): serves the website. Static assets and serverless functions are hosted in EU regions where available. Privacy policy.
• Anthropic PBC (AI chat assistant): processes the conversation content you send through the on-site chat assistant to generate responses. No conversation data is used to train Anthropic's models. Privacy policy.
• Resend (email delivery): handles transactional email for contact, quote, and newsletter forms. Privacy policy.
• Analytics: if and when added (e.g. Plausible or Vercel Analytics), this section will be updated to reflect what is collected and how to opt out.

7. Cookies

We use only strictly-necessary cookies by default. Analytics or marketing cookies are set only after you give consent through the cookie banner. You can change your choice at any time using the “Cookie Settings” link in the site footer.

8. Data retention

• Contact and quote enquiries: retained for up to 24 months after the most recent correspondence, then deleted.
• Newsletter subscriptions: retained until you unsubscribe.
• Server logs: retained for up to 30 days for security and debugging.

9. Your rights (GDPR Articles 15–21)

As a data subject you have the right to:

• Access (Art. 15): request confirmation of what personal data we hold about you.
• Rectification (Art. 16): ask us to correct inaccurate or incomplete data.
• Erasure (Art. 17): request deletion of your personal data, subject to legal retention obligations.
• Restriction (Art. 18): ask us to limit processing in certain circumstances.
• Data portability (Art. 20): receive your data in a structured, machine-readable format.
• Object (Art. 21): object to processing based on legitimate interests.
• Withdraw consent: at any time, without affecting the lawfulness of prior processing.

10. How to exercise your rights

To exercise any of these rights, email hello@iwordscommunications.com with the subject line “GDPR request”. We will respond within 30 days as required by Article 12 GDPR.

11. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. For the United Kingdom this is the Information Commissioner's Office (ICO). Residents of EU member states may contact their local supervisory authority instead.

12. Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The current version always lives at this URL. Material changes will be highlighted on the homepage for at least 14 days.

Last updated: 5 May 2026.